Valve controller for pressure stabilization

ABSTRACT

Method and apparatus for controlling pressure in a pressure vessel. A plurality of valves between a pressure source and a pressure vessel can be selectively opened or turned off, singularly or in combinations, to control pressure in the pressure vessel. A maximum pressure threshold and a minimum pressure threshold can be established based on operating considerations of the pressure vessel. One or more of the valves can be turned on when the pressure in the pressure vessel reaches the minimum pressure threshold. One or more of the valves can be turned off when the pressure in the pressure vessel reaches the maximum pressure threshold.

BACKGROUND

Aspects described herein relate to regulating pressure, and morespecifically, to a controller for regulating pressure.

SUMMARY

According to one aspect, a method for regulating pressure in a pressurevessel connected to a pressure source by a plurality of valves includesreceiving a maximum pressure threshold value. The method also includesreceiving a minimum pressure threshold value. The method also includesreceiving a pressure signal indicating a pressure in the pressurevessel. The method also includes, upon a value of the pressure signaldropping below the minimum pressure threshold value, opening at leastone of the plurality of valves. The method also includes, upon a valueof the pressure signal rising above the maximum pressure thresholdlevel, closing at least one of the plurality of valves.

According to one aspect, an apparatus for controlling pressure in apressure vessel, wherein the pressure vessel is connected to a pressuresource by a plurality of valves, and wherein the pressure vesselincludes one or more pressure sensors that measure pressure within thepressure vessel, the apparatus including a sensor input configured toreceive analog pressure signals from the one or more pressure sensors.The apparatus also includes a high-threshold input that receives ahigh-pressure limit signal. The apparatus also includes a low-thresholdinput that receives a low-pressure limit signal. The apparatus alsoincludes a valve controller. The valve controller is configured tocompare the one or more digital pressure signals to the high-pressurelimit signal and the low-pressure limit signal. The valve controller isalso configured to output a first valve driver signal that causes atleast one of the plurality of valves to open upon the one or moredigital pressure signals dropping below the low-pressure limit signal.The valve controller is also configured to output a second valve driversignal that causes at least one of the plurality of valves to close uponthe one or more digital pressure signals rising above the high-pressurelimit signal.

According to one aspect, a vehicle includes an engine and a pressurizedfuel storage tank. The vehicle also includes a pressure sensor in thepressurized fuel storage tank configured to output pressure signals. Thevehicle also includes a pressure source for the pressurized fuel storagetank. The vehicle also includes a plurality of selectively controllablevalves between the pressurized fuel storage tank and the pressuresource. The vehicle also includes a flight management computerconfigured to control operation of the engine, wherein the flightmanagement computer outputs a high pressure limit signal and a lowpressure limit signal. The vehicle also includes a valve controller. Thevalve controller includes a pressure input configured to receive theoutput pressure signals from the pressure sensor. The valve controlleralso includes a high pressure threshold input configured to receive thehigh-pressure limit signal. The valve controller also includes a lowpressure threshold input configured to receive the low-pressure limitsignal. The valve controller also includes at least one output incommunication with the plurality of selectively controllable valves. Thevalve controller also includes a processor. The processor is configuredto compare the pressure signals to the high pressure limit signal andthe low pressure threshold signal. The processor is also configured tooutput a first valve driver signal to the plurality of selectivelycontrollable valves upon the pressure signals dropping below thelow-pressure limit signal, wherein the first valve driver signal causesat least one of the plurality of selectively controllable valves toopen. The processor is also configured to output a second valve driversignal to the plurality of selectively controllable valves upon thepressure signals rising above the high-pressure limit signal, whereinthe second valve driver signal causes at least one of the plurality ofselectively controllable valves to close.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

FIG. 1 is a schematic diagram of a rocket with propellant tanks and apressurization tank, wherein the rocket includes a crew escape modulewith separate propellant tanks and a pressurization tank;

FIG. 2 is a schematic diagram of a valve arrangement for controllingflow of helium from a helium pressurization tank to a propellant tankand of a controller arrangement for controlling operation of the valvearrangement;

FIG. 3A is a block diagram of a method for controlling all of the valvesshown in FIG. 2 simultaneously;

FIG. 3B is a block diagram of a method for controlling the valves shownin FIG. 2 in a sequential manner;

FIG. 4A is a diagram of pressure in the propellant tank of FIG. 2according to control of the valves in accordance with the method shownin FIG. 3;

FIG. 4B is a diagram of rate of pressure increase in the propellant tankof FIG. 2 according to control of the valves in accordance with a methodaccording to various aspects; and

FIG. 4C is a diagram of rate of pressure decrease in the propellant tankof FIG. 2 according to control of the valves in accordance with a methodaccording to various aspects.

DETAILED DESCRIPTION

In the following, reference is made to aspects presented in thisdisclosure. However, the scope of the present disclosure is not limitedto specific described aspects. Instead, any combination of the followingfeatures and elements, whether related to different aspects or not, iscontemplated to implement and practice contemplated aspects.Furthermore, although aspects disclosed herein may achieve advantagesover other possible solutions or over the prior art, whether or not aparticular advantage is achieved by a given aspect is not limiting ofthe scope of the present disclosure. Thus, the following aspects,features, and advantages are merely illustrative and are not consideredelements or limitations of the appended claims except where explicitlyrecited in a claim(s). Likewise, reference to “the invention” shall notbe construed as a generalization of any inventive subject matterdisclosed herein and shall not be considered to be an element orlimitation of the appended claims except where explicitly recited in aclaim(s).

FIG. 1 illustrates aspects in a rocket 100 (i.e., a spacecraft) thatincludes a crew escape module 102 and a main rocket body 120. The mainrocket body 120 includes one or more engines 122. The engine(s) 122 arepowered by a first propellant tank 124 and a second propellant tank 126.In various aspects, the first propellant tank 124 can store a differentpropellant (i.e., fuel) than the second propellant tank 126. In suchaspects, the engine(s) 122 can mix the different fuels for combustion.In various other aspects, the first propellant tank 124 and the secondpropellant tank 126 can store the same propellant and can both supplythe same propellant to the engine(s) 122. In various aspects, the mainrocket body 120 could include a single propellant tank or three or morepropellant tanks. The propellant is typically pumped to the engine(s)122 from the first propellant tank 124 and the second propellant tank126 by pumps (e.g., turbopumps). As propellant from the first propellanttank 124 and the second propellant tank 126 are pumped to the engine(s)122, a vacuum can develop in the first propellant tank 124 and thesecond propellant tank 126. The vacuum can reduce the amount ofpropellant pumped by the pumps. As a result, the engine(s) 122 couldlose thrust.

The first propellant tank 124 and the second propellant tank 126 areconnected to a pressure tank 128. The pressure tank 128 can store a gas,such as helium, under pressure. As propellant is drained from the firstpropellant tank 124 and the second propellant tank 126, the propellantcan be replaced by gas from the pressure tank 128 to prevent a vacuumfrom developing. A first valve 130 can be placed between the pressuretank 128 and the first propellant tank 124 and a second valve 132 can beplaced between the pressure tank 128 and the second propellant tank 126.The first valve 130 and the second valve 132 can meter the flow of gasfrom the pressure tank 128 to the first propellant tank 124 and thesecond propellant tank 126, respectively. In various aspects, the firstvalve 130 and the second valve 132 can be two-position valves (e.g.,valves that are either open or closed). In various aspects, the firstvalve 130 can include multiple valves that can operate individually orin unison. The second valve 132 can also include multiple valves thatcan operate individually or in unison.

The first valve 130 and the second valve 132 are controlled by a valvecontroller 134, described in greater detail below. In various aspects,the valve controller 134 is completely autonomous, meaning that it doesnot require communication with a computer onboard the main rocket (e.g.,a flight management computer (FMC) 136) to operate the valves. Invarious other aspects, the valve controller 134 is mostly autonomous,but can receive certain commands and/or pressure requirement informationfrom a computer onboard the main rocket body 120.

The crew escape module 102 can be arranged on top of the main rocketbody 120. In the event of a failure of the main rocket body 120, thecrew escape module 102 can fire one or more engines 104 that canseparate the crew escape module 102 from the main rocket body 120 andmove the crew escape module 102 to a safe altitude at which parachutesor the like can be deployed. The engine(s) 104 is powered by a firstpropellant tank 106 and a second propellant tank 108. In variousaspects, the first propellant tank 106 can store a different propellant(i.e., fuel) than the second propellant tank 108. In such aspects, theengine(s) 104 can mix the different fuels for combustion. In variousother aspects, the first propellant tank 106 and the second propellanttank 108 can store the same propellant and can both supply the samepropellant to the engine(s) 104. In various aspects, the crew escapemodule 102 could include a single propellant tank or three or morepropellant tanks. The propellant is typically pumped to the engine(s)104 from the first propellant tank 106 and the second propellant tank108 by pumps (e.g., turbopumps). As propellant from the first propellanttank 106 and the second propellant tank 108 are pumped to the engine(s)104, a vacuum can develop in the first propellant tank 106 and thesecond propellant tank 108. The vacuum can reduce the amount ofpropellant pumped by the pumps. As a result, the engine(s) 104 couldlose thrust.

The first propellant tank 106 and the second propellant tank 108 can beconnected to a pressure tank 110. The pressure tank 110 can store a gas,such as helium, under pressure. As propellant is drained from the firstpropellant tank 106 and the second propellant tank 108, the propellantcan be replaced by gas from the pressure tank 110 to prevent a vacuumfrom developing. A first valve 112 can be placed between the pressuretank 110 and the first propellant tank 106 and a second valve 114 can beplaced between the pressure tank 110 and the second propellant tank 108.The first valve 112 and the second valve 114 can meter the flow of gasfrom the pressure tank 110 to the first propellant tank 106 and thesecond propellant tank 108, respectively. In various aspects, the firstvalve 112 and the second valve 114 can be two-position valves (e.g.,valves that are either open or closed). In various aspects, the firstvalve 112 can include multiple valves that can operate individually orin unison. The second valve 114 can also include multiple valves thatcan operate individually or in unison.

The first valve 112 and the second valve 114 can be controlled by avalve controller 116, described in greater detail below. In variousaspects, the valve controller 116 is completely autonomous, meaning thatit does not require communication with a computer onboard the mainrocket (e.g., a flight management computer (FMC) 118) to operate thevalves. In various other aspects, the valve controller 116 is mostlyautonomous, but can receive certain commands and/or pressure requirementinformation from a computer onboard the crew escape module 102.

For illustration purposes, both the main rocket body 120 and the crewescape module 102 of the rocket 100 include a similar propulsion layout.In various aspects, the crew escape module 102 or the main rocket body120 could use a different propulsion layout.

FIG. 2 illustrates an arrangement of valves 206 between a pressure tank204 and a propellant tank 202. The valves 206 include four valvesarranged in parallel between the pressure tank 204 and the propellanttank 202. In various aspects, the valves 206 can be actuated at the sametime. For example, multiple valves may be necessary to achieve a desiredflow area through the valves. In that case, the multiple valves can beactuated simultaneously to effectively act as one large valve. Incertain aspects, a first valve 206 a can be turned on (i.e., opened) ifthe pressure within the propellant tank 202 drops below a thresholdlevel. If the pressure within the propellant tank 202 remains below thethreshold level, a second valve 206 b could be turned on. Additionalvalves 206 c and 206 d can be turned on if the pressure in thepropellant tank 202 remains below the threshold level. In certainaspects, described in greater detail below, different numbers and/orcombinations of valves 206 a, 206 b, 206 c, and 206 d could be turned onto achieve a desired rate of change of pressure in the propellant tank202. Referring again to FIG. 1, each of the valves 112, 114, 130, and132 can include multiple valves like that shown in FIG. 2.

FIG. 2 also illustrates a valve controller 220 according to variousaspects for controlling the valves 206 according to various aspects. Thevalve controller 220 can include a processor 224, such as a fieldprogrammable gate array (FPGA) processor. The valve controller 220 canbe a stand-alone unit (e.g., that can be used to test a valve system206) or can be incorporated into a vehicle, such as the rocket 100 shownin FIG. 1. The valve controller 220 includes a first input 230 (i.e., amaximum pressure threshold input) that can receive a minimum pressurethreshold value signal for the propellant tank 202. The valve controller220 can also include a second input 232 (i.e., a minimum pressurethreshold input) that can receive a maximum pressure threshold valuesignal for the propellant tank 202. In various aspects in which thevalve controller 220 is a stand-alone unit, the minimum pressurethreshold value signal and the maximum pressure threshold value signalcan be provided by switches (e.g., hex switches) arranged on a housingfor the valve controller 220. In various aspects in which the valvecontroller 220 is incorporated into a vehicle, the maximum pressurethreshold value signal and the minimum pressure threshold value signalcan be provided by an FMC (e.g., FMC 118 or FMC 136). If the performanceof the engine(s) (e.g., engine(s) 104 or engine(s) 122) is notacceptable (e.g., if the engine is not producing sufficient thrust orthe thrust specific fuel consumption is not sufficient), the FMC coulddetermine that the pressure in the propellant tank 202 is not highenough. As a result, the FMC could increase the maximum pressurethreshold value signal and/or the minimum pressure threshold valuesignal. In various aspects in which the valve controller 220 isincorporated into a vehicle, the maximum pressure threshold value signaland the minimum pressure threshold value signal could be provided byswitches in a cockpit of the vehicle that can be adjusted by a pilot,engineer, or other operator on board the vehicle.

The valve controller 220 also includes a third input 234 that canreceive an enable signal. The third input 234 can be connected to anenable signal module 246 that can provide the enable signal to the valvecontroller 220. In various aspects in which the controller 200 is astandalone unit, the enable signal module 246 can be a physical switch(e.g., a toggle switch) arranged on a housing 222 of the valvecontroller 220. In various aspects in which the controller 220 isincorporated in a vehicle, the enable signal module 246 could be avehicle management computer. For example, as described above, the valvecontroller 220 could be used to control valves for a crew escape module(e.g., crew escape module 102) that is used in the event of a failure ofa main rocket (e.g., main rocket body 120). In the event the crew escapemodule is to be used, an FMC (e.g., FMC 136) on board the main rocketbody 120 could send a signal to the FMC 118 of the crew escape module102. The FMC 118 of the crew escape module 102 could, in turn, send theenable signal to the valve controller 220. Alternatively, the FMC 136onboard the main rocket body 120 could send the enable signal to thevalve controller 220.

The valve controller 220 can include a fourth input 226 that receivespressure signals from one or more pressure sensors 208 that are arrangedin the propellant tank 202. In various embodiments, a sensor data signalconditioning module 240 can be arranged between the pressure sensor(s)208 and the valve controller 220. The sensor data signal conditioningmodule 240 can provide power to the pressure sensor(s) 208. The sensordata signal conditioning module 240 can supply different voltages fordifferent types of pressure sensors. For example, certain pressuresensors require a 10 volt power supply. As another example, certainpressure sensors require a 28 volt power supply. Other pressure sensorsmay require different voltages. In various aspects, the sensor datasignal conditioning module 240 could selectively supply a first voltageor a second voltage. In various aspects, the sensor data signalconditioning module 240 could supply a first voltage to a first sensorand supply a second voltage to a second sensor. The sensor data signalconditioning module 240 can also provide filtering (e.g., RC filtering)of pressure signals received from the sensor(s) 208. In various aspectsin which there are at least two sensors 208, the sensor data signalconditioning module 240 can perform multiplexing on the signals from themultiple sensors 208. The sensor data signal conditioning module 240 canalso include amplifiers that amplify the signals from the pressuresensor(s) 208. The sensor data signal conditioning module 240 can alsoinclude an analog-to-digital converter (ADC) that converts analogsignals from the pressure sensor(s) 208 into digital signals. The sensordata signal conditioning module 240 can also include a transceiver thatcan transmit the conditioned pressure signals from the pressuresensor(s) 208 to the valve controller 220. In various aspects, thesensor data signal conditioning module 240 can be incorporated into thevalve controller 220.

The valve controller 220 can include an output 228 that can transmitvalve control commands to the valves 206. In various aspects, a valvedriver module 248 can be arranged between the output 228 of the valvecontroller 220 and the valves 206. The valve driver module 248 canprovide specific signals required for operation of certain valves. Forexample, in various instances, the valves 206 may by operated bysolenoids. The solenoids may use a first level of current to actuate anda second level of current to remain actuated. The valve controller 220can send a command to the valve driver module 248 to open or close aspecific valve. The valve driver module 248, in turn, can output to thevalves 206 the voltages and/or currents necessary to actuate the valves206 in accordance with the commands from the valve controller 220. Thevalve controller 220 and the valve driver module 248 can actuate thevalves 206 a, 206 b, 206 c, and 206 d individually, simultaneously, orin combinations. In various aspects, the valve driver module 248 couldbe incorporated into the valve controller 220.

FIG. 3A illustrates a method 300 that a valve controller, such as valvecontroller 220, can implement to control valves, such as valves 206,simultaneously. In block 302, the method 300 can start. The method canmove to block 304 when an enable signal is received. As discussed abovewith reference to FIG. 1, in various aspects, the valve controller couldcontrol valves between a pressurization tank and a propellant tank forthe engine(s) of a crew escape module. In that case, an FMC onboard amain rocket could send the enable command upon detecting a failure ofthe main rocket. In various aspects, the enable signal may be sent tothe valve controller by a command center or the like that initiatesignition of the engine(s) of the main rocket. In various aspects, thevalve controller could be a stand-alone unit for testing control ofvalves between a pressurization tank and a propellant tank. In thatcase, the enable signal could be provided by a switch, button, or thelike on the unit.

In block 306, the method 300 checks to see if new data has been receivedfrom the sensors. In various instances, the processor in the valvecontroller (e.g., processor 224) could sample the pressure sensors(e.g., pressure sensor(s) 208) every millisecond. If new data from thesensor(s) is not available, then the method 300 loops back to block 306again. If new data is available, then, in block 308, the method 300determines whether the sensor data is data from the first sensor sampleafter the enable signal was received in block 304. If the sensor data isthe first sensor sample, then, in block 310, the valve controller canturn on (i.e., open) the valves. By turning the valves on, the method300 can ensure that the propellant tank is pressurized or ispressurizing without delay. After block 310, the method 300 can returnto block 306 to receive new sensor data (e.g., second sensor data, thirdsensor data, etc.). Since this new sensor data is not the first sensorsample, at block 308, the method moves to block 312. In block 312, themethod 300 determines whether the valves are turned on. If the valvesare turned on, then in block 314, the method 300 determines whether thepressure data from the sensors indicates a pressure that is higher thanthe pressure indicated by the maximum pressure threshold signal. If theindicated pressure is not higher than the maximum pressure threshold,then the method 300 returns to block 306 to receive the next sensordata. If the indicated pressure is higher than the maximum pressurethreshold, then, in block 316, the method 300 turns (i.e., closes) thevalves off and then returns to block 306 to receive the next sensordata. Referring again to block 312, if the method 300 determines thatthe valves are turned off, then in block 318, the method 300 determineswhether the pressure data from the sensors indicates a pressure that islower than the pressure indicated by the minimum pressure thresholdsignal. If the indicated pressure is not lower than the minimum pressurethreshold, then the method 300 returns to block 306 to receive the nextsensor data. If the indicated pressure is lower than the minimumpressure threshold, then, in block 320, the method 300 turns the valveson and then returns to block 306 to receive the next sensor data.

FIG. 3B illustrates a method 330 that a valve controller, such as valvecontroller 220, can implement to control valves, such as valves 206,individually or in combinations. In block 332, the method 330 can start.The method can move to block 334 when an enable signal is received. Asdiscussed above with reference to FIG. 1, in various aspects, the valvecontroller could control valves between a pressurization tank and apropellant tank for the engine(s) of a crew escape module. In that case,an FMC onboard a main rocket could send the enable command upondetecting a failure of the main rocket. In various aspects, the enablesignal may be sent to the valve controller by a command center or thelike that initiates ignition of the engine(s) of the main rocket. Invarious aspects, the valve controller could be a stand-alone unit fortesting control of valves between a pressurization tank and a propellanttank. In that case, the enable signal could be provided by a switch,button, or the like on the unit.

In block 336, the method 330 checks to see if new data has been receivedfrom the sensors. In various instances, the processor in the valvecontroller (e.g., processor 224) could sample the pressure sensors(e.g., pressure sensor(s) 208) every millisecond. If new data from thesensor(s) is not available, then the method 330 loops back to block 336again. If new data is available, then, in block 338, the method 330determines whether the sensor data is data from the first sensor sampleafter the enable signal was received in block 334. If the sensor data isthe first sensor sample, then, in block 340, the valve controller canturn on (i.e., open) one or more of the valves. By turning on one ormore of the valves, the method 330 can ensure that the propellant tankis pressurized or is pressurizing without delay. After block 340, themethod 330 can return to block 336 to receive new sensor data (e.g.,second sensor data, third sensor data, etc.). Since this new sensor datais not the first sensor sample, at block 338, the method moves to block342. In block 342, the method 330 determines whether the pressure datafrom the sensors indicates a pressure that is higher than the pressureindicated by the maximum pressure threshold signal. If the indicatedpressure is higher than the maximum pressure threshold, then, in block344, the method 330 turns off (i.e., closes) at least one valve and thenreturns to block 336 to receive the next sensor data. In variousaspects, the method 330 may turn off one valve per iteration at block344. For example, referring to FIG. 2, suppose that in a firstiteration, all four valves 206 a, 206 b, 206 c, and 206 d are on. If themethod 330 determines that the indicated pressure is higher than themaximum pressure threshold in block 342, then the method 330 may turnoff valve 206 d in block 344. The method then returns to block 336 forthe next iteration. If the method 330 determines that the indicatedpressure is still higher than the maximum pressure threshold in block342, then the method 330 may turn off valve 206 c (so that valves 206 cand 206 d are turned off) in block 344. The method then returns to block336 for the next iteration. If the method 330 determines that theindicated pressure is still higher than the maximum pressure thresholdin block 342, then the method 330 may turn off valve 206 b (so thatvalves 206 b, 206 c, and 206 d are turned off) in block 344. The methodthen returns to block 336 for the next iteration. If the method 330determines that the indicated pressure is still higher than the maximumpressure threshold in block 342, then the method 330 may turn off valve206 a (so that all valves 206 a, 206 b, 206 c, and 206 d are turned off)in block 340. In various embodiments, the method 330 may turn offmultiple valves per iteration of the method. For example, the method 330may turn off valves 206 a and 206 b during a first iteration of block344 and turn off valves 206 c and 206 d (so that all valves are turnedoff) during a second iteration of block 344. If the indicated pressureis not higher than the maximum pressure threshold, then the method 330moves to block 346 to receive the next sensor data.

In block 346, the method 330 determines whether the pressure data fromthe sensors indicates a pressure that is lower than the pressureindicated by the minimum pressure threshold signal. If the indicatedpressure is not lower than the minimum pressure threshold, then themethod 330 returns to block 336 to receive the next sensor data. If theindicated pressure is lower than the minimum pressure threshold, then,in block 348, the method 330 turns on at least one valve and thenreturns to block 306 to receive the next sensor data. In variousaspects, the method 330 may turn on all valves at block 348. In variousaspects, the method 330 may turn on one valve per iteration at block348. For example, referring to FIG. 2, suppose that in a firstiteration, all four valves 206 a, 206 b, 206 c, and 206 d are off. Ifthe method 330 determines that the indicated pressure is lower than theminimum pressure threshold in block 346, then the method 330 may turn onvalve 206 d in block 348. The method then returns to block 336 for thenext iteration. If the method 330 determines that the indicated pressureis still lower than the minimum pressure threshold in block 346, thenthe method 330 may turn on valve 206 c (so that valves 206 c and 206 dare turned on) in block 348. The method then returns to block 336 forthe next iteration. If the method 330 determines that the indicatedpressure is still lower than the minimum pressure threshold in block346, then the method 330 may turn on valve 206 b (so that valves 206 b,206 c, and 206 d are turned on) in block 348. The method then returns toblock 336 for the next iteration. If the method 330 determines that theindicated pressure is still lower than the minimum pressure threshold inblock 346, then the method 330 may turn on valve 206 a (so that allvalves 206 a, 206 b, 206 c, and 206 d are turned on) in block 348. Invarious embodiments, the method 330 may turn on multiple valves periteration of the method. For example, the method 330 may turn on valves206 a and 206 b during a first iteration of block 348 and turn on valves206 c and 206 d (so that all valves are turned on) during a seconditeration of block 348.

FIG. 4A illustrates a graphical representation 400 of pressurevariations in a pressure vessel (e.g., the propellant tank 202) whereinpressurization is being controlled by valves (e.g., the valves 206), andthe valves are being controlled by a valve controller (e.g., the valvecontroller 220) according to various aspects. The graphicalrepresentation depicts pressure on a vertical axis 404 and time on ahorizontal axis 402. The vertical axis 404 is intersected by a maximumpressure threshold value 408 and a minimum pressure threshold value 406.A line 410 shows sensed pressure (e.g., by the pressure sensor(s) 208)over time during some time interval during which the valve controller isoperating. As the sensed pressure 410 increases and reaches the maximumpressure threshold value at point 412, one or more of the valves can beturned off. As indicated, the sensed pressure 410 may continue to riseabove the maximum pressure threshold value 408 before beginning todecrease (e.g., as propellant is drained from the propellant tank 202).This pressure overshoot can be caused by a delay in the valves closing,air from the pressure source (e.g., pressure tank 204) moving throughpipes or ducts, or other factors. In various aspects, this pressureovershoot can be characterized for a particular system and the maximumpressure threshold value at which the valves are turned off can be setbelow a targeted maximum pressure threshold value. For example, for thepropellant tank 202, pressure tank 204, and valves 206 shown in FIG. 2,in various instances, the pressure in the propellant tank 202 may risean additional 1 psi after the valves are turned off. If the targetedmaximum pressure threshold value is 50 psi, then the maximum pressurethreshold value 408 may be set at 49 psi so that the valves 206 close at49 psi. After the valves are turned off, the sensed pressure 410 beginsto decrease and eventually reaches the minimum pressure threshold valueat point 414. When the minimum pressure threshold value 414 is reachedat point 414, the valve controller can open one or more valves. Asindicated, the sensed pressure 410 may continue to decrease below theminimum pressure threshold value 406 before beginning to increase. Thepressure undershoot can be caused by a delay in the valves opening, atime delay for air to move from the valves through pipes and in to thepressure vessel, or other factors. In various aspects, this pressureundershoot can be characterized for a particular system and the minimumpressure threshold value at which the valves are turned on can be setabove a targeted minimum pressure threshold value. For example, for thepropellant tank 202, pressure tank 204, and valves 206 shown in FIG. 2,in various instances, the pressure in the propellant tank 202 may dropan additional 1 psi after the valves are turned off. If the targetedminimum pressure threshold value is 45 psi, then the minimum pressurethreshold value 406 may be set at 46 psi so that the valves 206 turn onat 46 psi.

FIGS. 4B and 4C are graphical representations of rate of pressure changein a pressure vessel over time. In various aspects, the processor 224 ofthe valve controller could calculate a rate of pressure change bysubtracting subsequent sensed pressure measurements from the sensors208, calculating a difference between the subsequent measurements, anddividing the difference by the elapsed time between the subsequentmeasurements. FIG. 4B is a graphical representation 420 of a rate ofpressure increase in a pressure vessel, wherein the graph includespressure on the vertical axis 404 and time on the horizontal axis 402.In the graphical representation 420, the sensed pressure 410 isincreasing over time at a particular rate, as indicated by line 422 thathas an angle α relative to the horizontal axis 402. In various aspects,a particular rate of pressure increase may be desirable. Forillustration, suppose that the line 422 represents the desired rate ofpressure increase. If the rate of pressure increase is greater than thedesired rate (e.g., as represented by line 424, then the valvecontroller could turn off at least one of the valves. For example,referring again to FIG. 2, if all four valves 206 a, 206 b, 206 c and206 d are turned on and the pressure in the propellant tank 202 isincreasing at the rate indicated by line 424, then at least one of thevalves can be turned off to reduce the rate of pressure increase. Forexample, valve 206 a could be turned off. If the next sensor sample(s)indicate that the rate of pressure increase is still higher than thedesired rate, then a second valve could be turned off to further reducethe rate of pressure increase. For example, valve 206 b could be turnedoff. If the next sensor sample(s) indicate that the rate of pressureincrease is still higher than the desired rate, then a third valve couldbe turned off to further reduce the rate of pressure increase. Forexample, valve 206 c could be turned off. If the next sensor sample(s)indicate that the rate of pressure increase is still higher than thedesired rate, then a fourth valve could be turned off to further reducethe rate of pressure increase. For example, valve 206 d could be turnedoff. Conversely, if the rate of pressure increase is less than thedesired rate (e.g., as represented by line 426, then the valvecontroller could turn on at least one of the valves. For example,referring again to FIG. 2, if only one valve (e.g., valve 206 a) isturned on and the pressure in the propellant tank 202 is increasing atthe rate indicated by line 426, then at least one additional valve couldbe turned on to increase the rate of pressure increase. For example,valve 206 b could be turned on. If the next sensor sample(s) indicatethat the rate of pressure increase is still less than the desired rate,then a third valve could be turned on to further increase the rate ofpressure increase. For example, valve 206 c could be turned on. If thenext sensor sample(s) indicate that the rate of pressure increase isstill less than the desired rate, then a fourth valve could be turned onto further increase the rate of pressure increase. For example, valve206 d could be turned on.

FIG. 4C is a graphical representation 430 of a rate of pressure decreasein a pressure vessel, wherein the graph includes pressure on thevertical axis 404 and time on the horizontal axis 402. In the graphicalrepresentation 420, the sensed pressure 410 is decreasing over time at aparticular rate, as indicated by line 432 that has an angle θ relativeto the horizontal axis 402. In various aspects, a particular rate ofpressure decrease may be desirable. For illustration, suppose that theline 432 represents the desired rate of pressure decrease. If the rateof pressure decrease is greater than the desired rate (e.g., asrepresented by line 436, then the valve controller could turn on atleast one of the valves. For example, referring again to FIG. 2, if allfour valves 206 a, 206 b, 206 c and 206 d are turned off and thepressure in the propellant tank 202 is decreasing at the rate indicatedby line 436, then at least one of the valves can be turned on to reducethe rate of pressure decrease. For example, valve 206 a could be turnedon. If the next sensor sample(s) indicate that the rate of pressuredecrease is still higher than the desired rate, then a second valvecould be turned on to further reduce the rate of pressure decrease. Forexample, valve 206 b could be turned on. If the next sensor sample(s)indicate that the rate of pressure decrease is still higher than thedesired rate, then a third valve could be turned on to further reducethe rate of pressure decrease. For example, valve 206 c could be turnedon. If the next sensor sample(s) indicate that the rate of pressuredecrease is still higher than the desired rate, then a fourth valvecould be turned on to further reduce the rate of pressure increase. Forexample, valve 206 d could be turned on. Conversely, if the rate ofpressure decrease is less than the desired rate (e.g., as represented byline 434, then the valve controller could turn off at least one of thevalves. For example, referring again to FIG. 2, if all of the valves areturned on and the pressure in the propellant tank 202 is decreasing atthe rate indicated by line 434, then at least one valve could be turnedoff to increase the rate of pressure decrease. For example, valve 206 acould be turned off. If the next sensor sample(s) indicate that the rateof pressure decrease is still less than the desired rate, then a secondvalve could be turned off to further increase the rate of pressuredecrease. For example, valve 206 b could be turned off. If the nextsensor sample(s) indicate that the rate of pressure decrease is stillless than the desired rate, then a third valve could be turned on tofurther increase the rate of pressure decrease. For example, valve 206 ccould be turned off. If the next sensor sample(s) indicate that the rateof pressure decrease is still less than the desired rate, then a fourthvalve could be turned on to further increase the rate of pressuredecrease. For example, valve 206 c could be turned off.

The descriptions of the various aspects have been presented for purposesof illustration, but are not intended to be exhaustive or limited to theaspects disclosed. Many modifications and variations will be apparent tothose of ordinary skill in the art without departing from the scope andspirit of the described aspects. The terminology used herein was chosento best explain the principles of the aspects, the practical applicationor technical improvement over technologies found in the marketplace, orto enable others of ordinary skill in the art to understand the aspectsdisclosed herein.

Aspects described herein may take the form of an entirely hardwareaspect, an entirely software aspect (including firmware, residentsoftware, micro-code, etc.) or an aspect combining software and hardwareaspects that may all generally be referred to herein as a “circuit,”“module” or “system.”

The aspects described herein may be a system, a method, and/or acomputer program product. The computer program product may include acomputer readable storage medium (or media) having computer readableprogram instructions thereon for causing a processor to carry outaspects disclosed herein.

The computer readable storage medium can be a tangible device that canretain and store instructions for use by an instruction executiondevice. The computer readable storage medium may be, for example, but isnot limited to, an electronic storage device, a magnetic storage device,an optical storage device, an electromagnetic storage device, asemiconductor storage device, or any suitable combination of theforegoing. A non-exhaustive list of more specific examples of thecomputer readable storage medium includes the following: a portablecomputer diskette, a hard disk, a random access memory (RAM), aread-only memory (ROM), an erasable programmable read-only memory (EPROMor Flash memory), a static random access memory (SRAM), a portablecompact disc read-only memory (CD-ROM), a digital versatile disk (DVD),a memory stick, a floppy disk, a mechanically encoded device such aspunch-cards or raised structures in a groove having instructionsrecorded thereon, and any suitable combination of the foregoing. Acomputer readable storage medium, as used herein, is not to be construedas being transitory signals per se, such as radio waves or other freelypropagating electromagnetic waves, electromagnetic waves propagatingthrough a waveguide or other transmission media (e.g., light pulsespassing through a fiber-optic cable), or electrical signals transmittedthrough a wire.

Computer readable program instructions described herein can bedownloaded to respective computing/processing devices from a computerreadable storage medium or to an external computer or external storagedevice via a network, for example, the Internet, a local area network, awide area network and/or a wireless network. The network may comprisecopper transmission cables, optical transmission fibers, wirelesstransmission, routers, firewalls, switches, gateway computers and/oredge servers. A network adapter card or network interface in eachcomputing/processing device receives computer readable programinstructions from the network and forwards the computer readable programinstructions for storage in a computer readable storage medium withinthe respective computing/processing device.

Computer readable program instructions for carrying out operationsaccording to various aspects may be assembler instructions,instruction-set-architecture (ISA) instructions, machine instructions,machine dependent instructions, microcode, firmware instructions,state-setting data, or either source code or object code written in anycombination of one or more programming languages, including an objectoriented programming language such as Smalltalk, C++ or the like, andconventional procedural programming languages, such as the “C”programming language or similar programming languages. The computerreadable program instructions may execute entirely on the user'scomputer, partly on the user's computer, as a stand-alone softwarepackage, partly on the user's computer and partly on a remote computeror entirely on the remote computer or server. In the latter scenario,the remote computer may be connected to the user's computer through anytype of network, including a local area network (LAN) or a wide areanetwork (WAN), or the connection may be made to an external computer(for example, through the Internet using an Internet Service Provider).In some embodiments, electronic circuitry including, for example,programmable logic circuitry, field-programmable gate arrays (FPGA), orprogrammable logic arrays (PLA) may execute the computer readableprogram instructions by utilizing state information of the computerreadable program instructions to personalize the electronic circuitry,in order to perform aspects described herein.

Aspects are described herein with reference to flowchart illustrationsand/or block diagrams of methods, apparatus (systems), and computerprogram products. It will be understood that each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer readable program instructions.

These computer readable program instructions may be provided to aprocessor of a general purpose computer, special purpose computer, orother programmable data processing apparatus to produce a machine, suchthat the instructions, which execute via the processor of the computeror other programmable data processing apparatus, create means forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks. These computer readable program instructionsmay also be stored in a computer readable storage medium that can directa computer, a programmable data processing apparatus, and/or otherdevices to function in a particular manner, such that the computerreadable storage medium having instructions stored therein comprises anarticle of manufacture including instructions which implement aspects ofthe function/act specified in the flowchart and/or block diagram blockor blocks.

The computer readable program instructions may also be loaded onto acomputer, other programmable data processing apparatus, or other deviceto cause a series of operational steps to be performed on the computer,other programmable apparatus or other device to produce a computerimplemented process, such that the instructions which execute on thecomputer, other programmable apparatus, or other device implement thefunctions/acts specified in the flowchart and/or block diagram block orblocks.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods, and computer program products according to variousaspects. In this regard, each block in the flowchart or block diagramsmay represent a module, segment, or portion of instructions, whichcomprises one or more executable instructions for implementing thespecified logical function(s). In some alternative implementations, thefunctions noted in the block may occur out of the order noted in thefigures. For example, two blocks shown in succession may, in fact, beexecuted substantially concurrently, or the blocks may sometimes beexecuted in the reverse order, depending upon the functionalityinvolved. It will also be noted that each block of the block diagramsand/or flowchart illustration, and combinations of blocks in the blockdiagrams and/or flowchart illustration, can be implemented by specialpurpose hardware-based systems that perform the specified functions oracts or carry out combinations of special purpose hardware and computerinstructions.

While the foregoing is directed to various aspects, other and furtheraspects may be devised without departing from the basic scope thereof,and the scope thereof is determined by the claims that follow.

1-4. (canceled)
 5. An apparatus for controlling pressure in a pressurevessel, wherein the pressure vessel is connected to a pressure source bya plurality of valves, and wherein the pressure vessel includes one ormore pressure sensors arranged to measure pressure within the pressurevessel, the apparatus comprising: a sensor input configured to receivepressure signals from the one or more pressure sensors; a maximumpressure threshold input configured to receive a maximum pressurethreshold signal; a minimum pressure threshold input configured toreceive a minimum pressure threshold signal; a power output configuredto provide a power supply to the one or more pressure sensors; a valvesignal output configured to output valve driver signals; a valvecontroller configured to: compare the one or more pressure signals tothe maximum pressure threshold signal and the minimum pressure thresholdsignal; upon the one or more pressure signals dropping below a valueassociated with the minimum pressure threshold signal, outputting afirst valve driver signal that causes at least one of the plurality ofvalves to open; and upon the one or more pressure signals rising above avalue associated with the maximum pressure threshold signal, outputtinga second valve driver signal that causes at least one of the pluralityof valves to close.
 6. The apparatus of claim 5, further comprising anengagement signal input configured to receive an engagement signal,wherein upon receiving the engagement signal, the valve controller opensat least one of the plurality of valves.
 7. The apparatus of claim 5,wherein the valve controller is configured to, after opening at leastone of the plurality of valves and upon the pressure signal remainingbelow the value associated with the minimum pressure threshold signal,open at least a second of the plurality of valves.
 8. The apparatus ofclaim 5, wherein the valve controller is configured to, after closing atleast one of the plurality of valves and upon the pressure signalremaining above the value associated with the maximum pressure thresholdsignal, close at least a second of the plurality of valves.
 9. Theapparatus of claim 5, wherein the power output is configured to output atwenty eight volt power supply and a ten volt power supply.
 10. Theapparatus of claim 5, wherein the power output is configured toselectively output a ten volt power supply or a twenty eight volt powersupply.
 11. The apparatus of claim 5, further comprising: a first hexswitch that outputs the maximum pressure threshold signal; and a secondhex switch that outputs the minimum pressure threshold signal.
 12. Theapparatus of claim 5, wherein the pressure vessel is a liquid fuelpropellant tank for an engine of a spacecraft, wherein the maximumpressure threshold signal and the minimum pressure threshold signal arereceived from a flight management computer for the spacecraft thatdynamically adjusts the maximum pressure threshold signal and theminimum pressure threshold signal based on performance of the engine ofthe spacecraft.
 13. The apparatus of claim 5, further comprising asignal conditioning module configured to: convert analog pressuresignals from the one or more pressure sensors to digital pressuresignals; and output the digital pressure signals.
 14. The apparatus ofclaim 5, further comprising a driver module configured to selectivelyprovide drive signals to the plurality of valves; wherein the valvecontroller is configured to output the first valve driver signal to thedriver module, wherein the driver module provides a first drive signalto the plurality of valves, in response to the first valve driversignal, that causes at least one of the plurality of valves to open; andwherein the valve controller is configured to output the second valvedriver signal to the driver module, wherein the driver module provides asecond drive signal to the plurality of valves, in response to thesecond valve driver signal, that causes at least one of the plurality ofvalves to close. 15-20. (canceled)
 21. The apparatus of claim 5, furthercomprising a vehicle, wherein the pressure vessel is a fuel storage tankarranged in the vehicle, wherein the plurality of valves comprise aplurality of selectively controllable valves arranged in the vehiclebetween the fuel storage tank and the pressure source, wherein the valvesignal output is operable to output valve driver signals to theplurality of selectively controllable valves, and wherein the vehiclecomprises: an engine; a pressure sensor in the fuel storage tank andoperable to output pressure signals to the sensor input; and a firstcomputer processor operable to control operation of the engine, whereinthe first computer processor outputs a maximum pressure threshold signalto the maximum pressure threshold input and outputs a minimum pressurethreshold signal to the minimum pressure threshold input.
 22. Theapparatus of claim 21, wherein the vehicle further comprises an enablesignal module that is configured to output an enable signal, wherein thevalve controller further comprises an enablement input, and wherein,upon receiving the enable signal, the processor opens at least one ofthe plurality of valves prior to comparing the pressure signals to themaximum pressure threshold signal and the minimum pressure thresholdsignal.
 23. The apparatus of claim 21, wherein the vehicle is a crewescape module of a rocket, wherein the engine is configured to separatethe crew escape module from the rocket in the event of a malfunction ofthe rocket, and wherein the enable signal module automatically outputsthe enable signal upon a malfunction of the rocket.
 24. The apparatus ofclaim 21, wherein the second processor is configured to, after openingat least one of the plurality of valves and upon the pressure signalremaining below the value associated with the minimum pressure thresholdsignal, open at least a second of the plurality of valves.
 25. Theapparatus of claim 21, wherein the second processor is configured to,after closing at least one of the plurality of valves and upon thepressure signal remaining above the value associated with the maximumpressure threshold signal, close at least a second of the plurality ofvalves.
 26. The apparatus of claim 21, wherein the first processorchanges at least one of the output maximum pressure threshold signal andthe output minimum pressure threshold signal in response to an amount ofthrust being produced by the engine.